The vulnerability involves improper handling of local filesystem paths within the Rapid7 Insight Agent, enabling a form of shell injection that can be triggered by a crafted configuration entry in mcp.json. The flaw is classified as an OS Command Injection weakness (CWE-78) and allows an authenticated local user to execute arbitrary commands. This can lead to elevated privileges and compromise of the host system.

Rapid7 Insight Agent deployments on Linux and macOS that are running versions prior to 4.1.4.43 are affected. Systems with the older agent installed and where local users have access to the agent’s configuration or inventory directories are at risk.

With a CVSS score of 7.8 and no EPSS data available, the exploit reliance on local user access makes the threat moderate to high. The vulnerability is not listed in CISA’s KEV catalog. An attacker with local authenticated access can manipulate the agent’s inventory processing of a crafted path, resulting in shell command execution and privilege escalation. The attack vector is inferred to be local, requiring the attacker to have at least user‑level privileges to influence the agent’s configuration or inventory data.